Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/f2b077cd-d186-3936-925e-32f55f22c55b.roa
File:                     f2b077cd-d186-3936-925e-32f55f22c55b.roa (raw, json)
Hash identifier:          ko2Heu6Lmjs05uAer6L0yZzk5fx83XE/9uVAKLCIAp8=
Subject key identifier:   35:EA:BC:6D:F0:3A:4E:DA:B0:83:42:68:D7:B9:9A:C2:1C:A7:8D:47
Certificate issuer:       /CN=e7ec087a-afbe-4e15-92d3-ababccc0bbe0
Certificate serial:       010D0C9F4328584E86F4E5038145D9199C792A00
Authority key identifier: F7:09:2F:B9:C4:2D:7E:01:35:91:1E:A9:DD:ED:D5:EB:B6:9B:82:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/f2b077cd-d186-3936-925e-32f55f22c55b.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     32688
IP address blocks:        168.245.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:e5:03:81:45:d9:19:9c:79:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ec087a-afbe-4e15-92d3-ababccc0bbe0
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=cc8c25d4-dfeb-4b23-bd15-c5f8dfbb5735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:42:e4:02:ae:8f:66:57:d4:bb:b9:d6:81:7d:
                    65:06:cf:09:5a:d3:37:9a:3b:db:0d:87:5f:c1:f5:
                    84:a3:f3:42:dc:69:de:06:b7:c3:55:4f:f7:04:29:
                    76:b3:98:8d:85:98:2a:e8:eb:dc:a3:de:cf:69:88:
                    b8:db:2d:69:4b:ad:46:4b:54:ce:b4:76:59:cc:c1:
                    08:8e:ae:dc:01:79:a2:e7:dd:fe:af:4f:c0:44:67:
                    96:5b:bd:b3:fd:53:5b:4f:b4:45:ee:ed:ab:3a:2d:
                    39:c4:7a:aa:78:ca:04:31:b3:01:fa:74:3a:d8:dd:
                    29:f1:05:ad:05:a0:6f:ac:44:9f:03:0e:fe:8b:82:
                    74:92:bc:f4:32:69:50:9b:bb:99:a8:f4:15:4e:7d:
                    bb:3a:b2:c3:16:f7:f2:0f:61:42:0e:40:f9:45:4a:
                    ed:e2:c4:8b:f6:da:79:be:f6:50:fd:34:fb:6c:b5:
                    2e:c6:08:46:01:10:c0:92:49:af:54:c6:88:5f:6f:
                    0d:92:44:86:86:75:b0:c5:49:e6:76:be:c5:26:98:
                    69:7d:fe:f6:38:96:35:ea:f0:44:4d:3f:52:02:4e:
                    7e:2d:f4:ed:b3:04:63:da:d8:32:9e:a4:ef:24:25:
                    f9:c9:a0:fd:78:19:3b:10:3c:b2:05:5e:06:e8:11:
                    a7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EA:BC:6D:F0:3A:4E:DA:B0:83:42:68:D7:B9:9A:C2:1C:A7:8D:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/f2b077cd-d186-3936-925e-32f55f22c55b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.crl

            X509v3 Authority Key Identifier:
                keyid:F7:09:2F:B9:C4:2D:7E:01:35:91:1E:A9:DD:ED:D5:EB:B6:9B:82:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.245.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:6b:49:94:07:a2:d6:56:f5:33:a4:25:f8:e3:f7:4b:10:b9:
         0c:75:8e:52:d3:e8:59:9d:b5:7a:80:6a:78:5b:3f:06:81:4e:
         3c:53:12:71:db:ee:54:c3:43:6a:05:95:ef:3e:04:c8:d9:8c:
         33:64:b1:29:1f:be:96:b9:e3:86:26:c6:1a:32:9f:18:a3:70:
         d8:9c:5e:8d:70:86:d5:a8:59:34:91:bd:40:62:ce:d1:f9:5a:
         df:fc:94:40:ef:a9:29:a8:ec:8a:7c:b9:06:ae:28:f6:52:7b:
         b5:8a:15:29:d5:d4:74:b6:07:a2:da:7b:28:eb:93:7a:f2:58:
         63:0d:3c:04:8f:17:cd:98:d6:13:8a:b4:7d:7a:a1:44:7b:a0:
         c8:c6:0f:a7:da:bd:40:69:41:d7:d2:4e:07:b6:18:e2:56:92:
         17:08:b9:2d:41:ba:4b:f5:f2:ed:1a:a0:b5:26:02:8f:e9:20:
         9f:9a:c1:84:90:76:0e:06:ae:36:71:53:4e:b3:8b:18:1b:8a:
         99:36:29:24:35:90:79:b7:3d:64:26:75:4f:20:8e:62:fa:64:
         dd:66:f5:7b:b1:f4:e5:f7:f3:cd:63:d2:cf:6d:ce:05:f6:2a:
         45:8b:15:ed:97:06:1f:6a:20:c9:38:7e:3c:c7:6e:74:84:36:
         f0:b9:86:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:27 2026 by rpki-client